Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: SKoeDzfuLc0SjKGKd1+iQY5SmqmO3qLbe1QAkSg9c80=
Subject key identifier: F4:93:F6:40:E4:8A:DA:B9:8D:3D:24:94:09:3E:BE:CF:98:FB:47:21
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 01A0D9BBEDA0A4415C8445A5B365691865EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1A6E
Signing time: Fri 25 Sep 2026 18:02:46 +0000
Manifest this update: Fri 25 Sep 2026 18:02:46 +0000
Manifest next update: Sat 26 Sep 2026 18:02:46 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: osWkYTBO98xK4+FWE9YJA9U38yQs3FN45k9G8igihFk=)
2: dCps6FnO6mvWjOZhqC1yU38bvlQ.roa (hash: yetOlkwiuyExkdcVMH2qiiR88aNkz2bMNlY5zaV0IOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:ed:a0:a4:41:5c:84:45:a5:b3:65:69:18:65:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Sep 25 18:02:46 2026 GMT
Not After : Sep 26 18:02:46 2026 GMT
Subject: CN=f493f640e48adab98d3d2494093ebecf98fb4721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8a:76:48:42:53:54:03:d5:2a:c6:49:ab:c6:
31:98:98:0e:62:da:b4:7e:5e:16:a8:05:84:5e:fd:
99:f0:1f:7d:66:4a:61:04:76:c7:c7:34:cd:bf:e2:
23:aa:ec:ff:6d:b3:82:f1:81:43:80:65:cf:b5:d0:
e6:06:53:64:92:1e:3b:97:c3:b5:8c:5e:7f:ea:a9:
e2:50:a0:fa:55:37:95:af:f6:85:67:d7:69:39:d3:
fe:b7:e2:fd:33:e4:4e:85:fc:e8:d1:70:70:53:65:
66:c1:f4:68:23:99:ca:d2:ca:d8:62:7e:09:86:ae:
20:58:76:56:ee:72:d8:3b:f7:ac:86:d9:3c:5e:55:
47:d5:ee:67:46:f6:3c:6c:59:3a:74:a6:c9:18:6a:
5e:7d:90:4a:fb:01:b9:46:be:19:89:e7:33:ae:54:
4a:d9:62:7a:41:1f:0d:6a:2a:b2:20:83:37:4f:9a:
2e:03:57:ad:cd:70:52:5d:06:a5:09:5f:f5:51:4e:
db:0a:85:72:ac:67:b4:be:71:fc:44:95:09:25:0e:
55:4d:12:b9:ac:dd:84:e7:92:e1:2b:2a:ac:1f:95:
7d:bf:7c:1d:b4:59:54:a2:e2:8d:05:95:45:fc:8f:
7c:a6:ce:43:d7:e4:f7:d9:fc:dc:4b:0b:d3:31:e0:
bf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:93:F6:40:E4:8A:DA:B9:8D:3D:24:94:09:3E:BE:CF:98:FB:47:21
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7c:f4:95:6b:40:46:01:49:bf:26:7c:b7:cb:74:93:90:5e:
7a:90:63:e8:30:65:f3:7a:a3:32:0b:19:20:3d:1e:b2:f3:27:
29:95:93:79:6f:fe:e8:37:85:bf:dc:57:94:95:5b:7b:93:eb:
e9:6c:5a:42:4e:6f:c9:5a:19:fe:f6:8a:95:9c:33:e9:48:1a:
56:a1:aa:d3:21:e9:2d:6c:d6:49:95:5e:2f:dd:70:ce:3c:a3:
db:01:6f:a9:20:a9:f7:41:83:8b:b3:71:84:8c:89:7d:39:80:
f6:a7:ab:76:df:04:4a:38:01:60:86:70:58:85:56:e5:25:fc:
ed:da:09:f7:69:1c:80:f4:1f:ef:b7:fd:dd:49:4a:9d:2b:21:
c2:df:e7:b5:77:f6:a8:7a:18:bd:09:71:0c:73:80:73:91:64:
11:f7:3b:b1:26:a4:b5:14:5d:4a:12:a9:21:07:9f:e9:76:88:
1a:a4:3f:66:90:94:81:0e:ac:3f:fd:60:18:f8:08:76:16:3a:
63:e3:3a:07:65:7e:72:77:60:fc:13:fe:61:9c:1f:bc:7e:f1:
c5:25:48:93:d2:78:09:47:cb:b0:d1:8e:98:f8:f8:9b:17:20:
4a:67:df:54:82:f5:6d:9a:16:71:5f:0b:b3:1c:d0:8f:b7:d3:
d5:2b:55:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:49:42 2026 by rpki-client